Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/5a565018-d2c5-3763-8bd3-3af6097c5e66.roa
File:                     5a565018-d2c5-3763-8bd3-3af6097c5e66.roa (raw, json)
Hash identifier:          ttj5avK4EId/cZL/qhq7DXDFWHnmvSd7gGJetMwFEaY=
Subject key identifier:   A7:9B:64:AE:FD:9B:BC:F6:41:46:B7:C5:80:FF:57:CC:B0:B3:DB:85
Certificate issuer:       /CN=f88cbb0b-9e19-4ef0-9c1c-062df0729d5a
Certificate serial:       010D0C9F4328584ABD4B982C471E5E0E045CE620
Authority key identifier: BA:6B:6F:12:B8:DF:EC:57:4C:A6:E0:EB:06:1D:9C:3D:95:AA:CC:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/5a565018-d2c5-3763-8bd3-3af6097c5e66.roa
Signing time:             Mon 04 Aug 2025 01:00:32 +0000
ROA not before:           Mon 04 Aug 2025 01:00:32 +0000
ROA not after:            Sun 02 Nov 2025 01:00:32 +0000
asID:                     30294
IP address blocks:        74.119.25.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:bd:4b:98:2c:47:1e:5e:0e:04:5c:e6:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f88cbb0b-9e19-4ef0-9c1c-062df0729d5a
        Validity
            Not Before: Aug  4 01:00:32 2025 GMT
            Not After : Nov  2 01:00:32 2025 GMT
        Subject: CN=64424605-acdb-4c82-81da-38429ba10df5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:9f:14:73:eb:78:4a:db:0b:91:78:3a:0e:3f:
                    f0:4e:b2:fc:13:af:34:53:07:27:aa:10:67:2a:f3:
                    0e:f4:2b:29:75:81:ca:a5:e4:37:69:a4:7f:70:ee:
                    31:70:7c:d3:25:07:e9:c3:47:35:f4:e4:09:3e:a4:
                    7c:a3:20:f0:68:41:72:db:96:88:fa:ec:f9:31:7e:
                    d0:46:bd:55:2c:49:1a:6c:08:29:a3:9c:a7:f0:05:
                    24:8c:e0:ee:43:4e:8b:97:cd:79:44:af:ea:46:cb:
                    8a:fa:2c:b7:ae:54:18:b4:3a:d9:92:87:38:d3:eb:
                    de:ab:89:fe:af:db:21:73:cd:b3:76:e3:9a:72:3d:
                    31:65:f0:c8:41:c1:17:6d:2f:31:d6:1c:15:8f:56:
                    f6:0b:8f:6a:45:a6:f3:7a:e4:43:e5:c4:43:2f:94:
                    83:24:b7:b7:7e:a1:b8:4f:e1:84:59:8a:82:89:c6:
                    25:3f:aa:c5:02:0a:63:7f:e0:fd:52:0b:23:6c:93:
                    82:cf:7f:99:b2:a2:49:a3:4b:b5:5e:3e:6a:c8:96:
                    dc:4c:fc:5f:3a:f7:dd:2b:d4:62:ab:ab:fc:2f:ba:
                    04:da:75:43:58:3c:b6:2c:21:26:6e:4a:7e:1e:ec:
                    8c:c5:a3:66:b8:62:7a:ce:57:8a:4c:e0:53:e3:c9:
                    fe:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:9B:64:AE:FD:9B:BC:F6:41:46:B7:C5:80:FF:57:CC:B0:B3:DB:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/5a565018-d2c5-3763-8bd3-3af6097c5e66.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.crl

            X509v3 Authority Key Identifier:
                keyid:BA:6B:6F:12:B8:DF:EC:57:4C:A6:E0:EB:06:1D:9C:3D:95:AA:CC:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.119.25.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:54:54:a2:f2:63:df:93:0e:a9:0e:05:e2:b7:0d:e1:96:b9:
         5b:3b:cd:fb:0b:13:c6:83:c9:7d:03:75:65:28:51:49:76:6e:
         cb:a0:a4:04:cf:73:40:14:df:f5:8b:8c:f6:2a:10:ee:8b:fa:
         51:16:32:e8:8b:f7:fa:64:7a:d9:50:ec:bf:ee:fb:2d:21:1f:
         a4:92:07:27:86:6f:62:54:6e:98:b2:71:15:63:1e:12:a8:3b:
         fa:91:25:b6:93:66:dc:a8:21:ca:27:d2:7a:ae:e7:6e:f5:5b:
         5c:8e:f2:a2:e8:0f:cb:05:23:f1:b6:01:4f:39:25:5b:ea:71:
         f4:1e:32:89:3f:2d:91:a5:bd:3c:5b:a9:ae:c5:5b:98:9b:5e:
         56:d1:0e:a8:0a:e3:65:00:2e:f4:46:ec:3b:5f:8e:f8:74:5b:
         02:0c:d5:e1:9d:32:5c:13:a2:a1:fb:d6:55:e0:6f:50:5f:fa:
         8a:73:7e:0f:5a:41:19:b6:e5:db:c3:94:49:47:63:0d:78:ac:
         68:fa:bc:9a:83:7c:f4:b6:70:a1:c2:a6:27:f7:70:52:34:fd:
         d4:90:cb:6b:aa:91:ae:2e:34:12:6a:05:e1:f4:44:d7:e9:2d:
         1e:91:72:c1:2a:4e:f5:92:02:52:f4:b1:7f:60:e9:93:a8:50:
         c6:91:82:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:01:14 2025 by rpki-client